Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/hwKR5Xtzzf-dRsHBL5OmbaGDkfU.roa
File: hwKR5Xtzzf-dRsHBL5OmbaGDkfU.roa (raw, json)
Hash identifier: omcBw7v+Kd2AxEnd/Omq43+nFBTrErwi0zpb+WQjB9U=
Subject key identifier: 87:02:91:E5:7B:73:CD:FF:9D:46:C1:C1:2F:93:A6:6D:A1:83:91:F5
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 018CC2DAFCBD1541A45555F6F74CC62DF257
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/hwKR5Xtzzf-dRsHBL5OmbaGDkfU.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210560
IP address blocks: 89.169.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fc:bd:15:41:a4:55:55:f6:f7:4c:c6:2d:f2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=870291e57b73cdff9d46c1c12f93a66da18391f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:fa:af:08:f9:cd:e9:bc:e8:b3:20:6d:6d:
a7:d1:c2:b3:ca:ca:8b:f3:6b:6c:d3:c3:5e:e8:02:
20:60:93:43:41:3d:10:22:6a:83:fb:e2:26:54:23:
b2:53:43:f0:82:5a:1b:b8:7d:6d:f5:fb:11:d0:a8:
f4:55:89:fd:50:77:8e:7f:46:5a:71:ad:47:f0:21:
39:66:07:ff:0e:4c:88:7d:9c:83:a6:71:18:df:d1:
ac:6f:27:26:49:05:f8:3e:57:62:7b:09:48:74:e9:
52:6b:95:d7:c6:12:76:b4:68:db:1f:62:09:df:0d:
c8:20:dc:e7:e9:1d:f3:6c:6c:15:bb:db:18:7d:6f:
1a:92:96:f1:48:ce:90:90:3c:01:4a:a7:79:73:88:
0f:ac:87:af:51:61:34:da:10:af:20:f8:de:09:3b:
1a:af:4d:67:8e:39:2b:3d:2a:8a:c1:6c:b7:58:bf:
11:1a:3b:17:93:f8:b9:48:4c:ca:d8:07:54:b1:b9:
c5:21:9a:af:8d:25:e2:34:b3:66:dc:9e:af:95:d2:
17:a4:32:42:d3:64:c1:db:33:17:c7:82:42:90:1e:
4a:a4:28:a4:8e:93:9f:77:1c:a6:14:a3:38:2d:99:
e3:21:40:5d:ea:a0:89:f8:86:57:e5:46:b2:6a:27:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:02:91:E5:7B:73:CD:FF:9D:46:C1:C1:2F:93:A6:6D:A1:83:91:F5
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/hwKR5Xtzzf-dRsHBL5OmbaGDkfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.169.96.0/19
Signature Algorithm: sha256WithRSAEncryption
94:cb:e1:8c:8c:20:27:bc:28:31:fc:b3:00:d6:29:54:7d:9e:
0d:fc:34:22:91:b8:76:3c:62:ed:e6:f9:2c:5e:ad:e2:99:48:
8e:92:27:38:64:3c:81:15:3b:fb:30:72:1a:e9:74:f6:e8:f6:
a0:fb:35:e1:b1:96:08:cc:ce:b1:f4:a9:c2:ff:f1:4c:a1:41:
8a:14:e1:83:99:2d:b0:70:e2:17:52:98:e1:98:fa:a1:2c:e7:
f3:d2:53:22:89:df:90:e1:fc:c8:e0:06:7a:1f:8c:c7:4e:56:
ac:d7:b7:a2:a2:b5:c0:3d:c8:aa:bc:c2:8d:02:01:72:16:06:
e1:17:7f:62:69:eb:6b:2f:d5:d3:e0:8d:89:0c:05:22:2f:b2:
99:3b:b4:99:d9:bf:d0:56:ae:a0:33:28:04:ff:75:cc:c3:28:
4f:f8:eb:76:8d:91:8a:a0:89:a2:20:a0:d4:b4:a9:84:36:d5:
37:d5:c8:82:64:35:0e:dc:c7:29:31:03:9d:9f:0e:6d:60:15:
b4:c8:8a:be:3e:85:1a:c7:37:34:22:63:b1:58:ae:7a:a8:c1:
e6:11:1c:99:52:4a:21:67:7b:12:69:b1:6d:33:de:bd:5f:b8:
9d:17:c4:47:db:8a:d4:fc:69:81:94:2e:21:5e:1d:73:39:43:
04:b7:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:15:01 2024 by rpki-client on console-ams.rpki-client.org